Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30303/PsuFVO859cuiAL2JC67Zp1AOWyU.roa
File:                     PsuFVO859cuiAL2JC67Zp1AOWyU.roa (raw, json)
Hash identifier:          Wwa+oN2/RQpv75e5Bex/rIBIHeJ5SuxfV5BGAvlp4Yk=
Subject key identifier:   3E:CB:85:54:EF:39:F5:CB:A2:00:BD:89:0B:AE:D9:A7:50:0E:5B:25
Certificate issuer:       /CN=669595EC4A0C31D74BA8963C2ECA7EB482251F74
Certificate serial:       2A
Authority key identifier: 66:95:95:EC:4A:0C:31:D7:4B:A8:96:3C:2E:CA:7E:B4:82:25:1F:74
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZpWV7EoMMddLqJY8Lsp-tIIlH3Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30303/PsuFVO859cuiAL2JC67Zp1AOWyU.roa
Signing time:             Tue 10 Jun 2025 10:45:47 +0000
ROA not before:           Tue 10 Jun 2025 10:45:47 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     63771
IP address blocks:        2401:7640::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30303/ZpWV7EoMMddLqJY8Lsp-tIIlH3Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30303/ZpWV7EoMMddLqJY8Lsp-tIIlH3Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZpWV7EoMMddLqJY8Lsp-tIIlH3Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=669595EC4A0C31D74BA8963C2ECA7EB482251F74
        Validity
            Not Before: Jun 10 10:45:47 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=3ECB8554EF39F5CBA200BD890BAED9A7500E5B25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e2:9a:b2:c4:7c:12:1e:56:41:a0:32:6a:86:
                    8f:45:06:6f:02:e8:2e:dc:63:f2:db:57:5f:a3:62:
                    50:a6:06:82:5a:37:74:ea:17:32:21:0b:d8:bf:a2:
                    aa:c3:d6:87:e5:84:9a:73:cb:c2:e5:b0:69:49:37:
                    e0:c5:55:60:1b:f0:a3:12:6f:f7:3a:9a:df:60:a3:
                    d0:fd:76:44:20:b8:fd:9d:a6:0a:58:8b:e6:d7:98:
                    a7:27:de:1f:8a:7f:e3:b7:39:40:48:80:36:96:78:
                    74:f4:04:98:5d:69:e3:a1:5f:fb:fa:41:83:08:14:
                    98:03:ac:fb:8e:69:cb:21:d2:32:d7:7c:f6:d8:f8:
                    fd:6c:48:93:3e:11:d9:7c:e1:79:37:fa:39:d6:ab:
                    5a:36:b6:f5:1a:5c:f4:80:d8:cc:9b:05:9c:4e:40:
                    ad:30:87:67:d1:d1:49:37:b2:a4:72:bb:e7:bd:de:
                    1e:55:94:c7:0e:de:99:65:b7:0e:ea:ee:18:36:96:
                    fc:50:81:1d:19:8e:f2:b4:5b:20:10:b7:58:79:d0:
                    3c:34:6d:ff:05:92:52:14:1d:a4:31:57:03:8a:8a:
                    42:21:8c:3b:ed:24:25:82:96:f2:23:05:f9:f4:4e:
                    d6:79:f5:09:9e:c2:e0:5d:70:55:06:16:4b:24:17:
                    c0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:CB:85:54:EF:39:F5:CB:A2:00:BD:89:0B:AE:D9:A7:50:0E:5B:25
            X509v3 Authority Key Identifier:
                keyid:66:95:95:EC:4A:0C:31:D7:4B:A8:96:3C:2E:CA:7E:B4:82:25:1F:74

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30303/ZpWV7EoMMddLqJY8Lsp-tIIlH3Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZpWV7EoMMddLqJY8Lsp-tIIlH3Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30303/PsuFVO859cuiAL2JC67Zp1AOWyU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7640::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:cc:97:7f:51:6f:a2:be:ba:97:22:f3:30:9a:ac:56:d5:51:
         9e:7a:82:de:3d:96:cb:e2:3e:bb:bf:d9:5b:c0:fe:99:7f:b6:
         7c:3a:0d:85:49:c8:bb:fb:02:56:af:bc:d8:d2:25:23:95:17:
         b6:1d:c5:d3:ed:2b:67:35:d6:27:e1:94:53:f7:57:ef:bd:b2:
         ec:9c:66:d3:6c:a3:58:55:e3:92:ca:a7:5a:cc:0d:17:0f:ab:
         65:43:79:ea:b0:85:f4:a2:de:23:c9:5e:6c:e4:8e:b2:03:29:
         d6:46:ed:c6:30:37:c5:9e:26:90:ff:74:85:c7:09:c1:0a:7c:
         7b:f5:36:6f:a0:4d:d3:f0:ed:95:a6:7c:a2:3e:1c:70:3e:18:
         93:e2:b4:81:c2:d0:9d:3e:02:20:fc:fd:e5:20:98:b9:4a:f9:
         3f:0e:f3:09:a8:80:db:0e:77:fd:8b:62:01:95:02:44:6d:b5:
         07:62:6f:27:77:4a:c1:65:9b:bb:ea:be:cc:a0:84:d7:f6:0e:
         d3:02:34:59:94:7f:7e:bc:4c:3a:33:f5:a5:7d:d1:5a:77:fa:
         db:44:ed:70:ce:ce:61:58:02:0e:d5:06:b1:da:6e:09:10:2f:
         64:79:a6:67:84:12:b3:26:e3:78:69:54:33:cb:74:31:f8:41:
         34:ad:5d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 03:07:49 2025 by rpki-client